Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
File: NIg6t5nxQCjltTdQbir4eESQQcU.mft (raw, json)
Hash identifier: 5CDTc1+j1BWEX+OxgkusTfxGVngSE/5Qgp64vp68qj0=
Subject key identifier: D4:5F:60:E9:8D:32:3B:AA:15:78:F1:94:30:19:A2:DA:97:B4:A0:3A
Authority key identifier: 34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
Certificate issuer: /CN=34883ab799f14028e5b537506e2af878449041c5
Certificate serial: 0196A277132FB81504F759CB59CBD497B282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
Manifest number: 03F4
Signing time: Mon 05 May 2025 22:00:34 +0000
Manifest this update: Mon 05 May 2025 22:00:34 +0000
Manifest next update: Tue 06 May 2025 22:00:34 +0000
Files and hashes: 1: NIg6t5nxQCjltTdQbir4eESQQcU.crl (hash: FbUyMndwGhxgfzZOIzULzdlZpOtUpbuHtd9raYt0G1M=)
2: aOjf7ha4NpM1xf113RLoBKrWwUY.roa (hash: hUQXGx10+6VeL01cd/7kpuKBjZges7kH8YJzcunm/rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:13:2f:b8:15:04:f7:59:cb:59:cb:d4:97:b2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34883ab799f14028e5b537506e2af878449041c5
Validity
Not Before: May 5 22:00:34 2025 GMT
Not After : May 6 22:00:34 2025 GMT
Subject: CN=d45f60e98d323baa1578f1943019a2da97b4a03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:15:d3:de:a4:da:f4:65:85:6a:02:ca:c3:
86:de:19:d8:9e:07:6b:a0:7c:b6:e8:96:02:8c:97:
91:aa:8c:f1:4a:b9:a8:a3:57:69:ad:d4:ef:68:59:
cc:b8:74:b0:99:f2:3e:50:b2:bb:af:a1:c9:7c:65:
18:67:ab:c6:63:46:20:f2:81:d9:38:e8:03:7f:95:
a7:ea:fc:eb:5b:1b:3b:b8:f7:d1:53:dd:e9:41:7c:
e7:0b:52:41:04:c6:4f:c8:66:75:51:36:d5:04:74:
47:cf:5e:72:9c:d2:94:a8:fb:6d:df:00:dd:b0:b1:
b6:aa:c0:01:06:3f:91:61:30:48:8d:8f:3a:13:c4:
0d:61:51:7c:17:f8:12:a4:69:02:a8:f1:f1:1a:3a:
c3:39:b6:40:3c:72:73:5a:78:48:56:87:03:c2:a6:
3b:3d:7c:73:91:fc:c2:bf:e6:74:89:64:48:a2:38:
60:3d:6b:6e:c4:1d:c6:29:ea:d5:32:2b:ce:69:dd:
52:ff:70:b6:bc:df:1c:7d:6b:d0:ce:ba:31:b1:50:
32:ff:d1:c2:0d:39:c0:da:23:0b:94:4c:69:5b:33:
1c:e0:44:33:2a:f0:dd:87:3f:a7:65:d2:d6:81:66:
a2:73:41:0e:71:af:c4:14:21:99:e4:9c:4f:c1:14:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:60:E9:8D:32:3B:AA:15:78:F1:94:30:19:A2:DA:97:B4:A0:3A
X509v3 Authority Key Identifier:
keyid:34:88:3A:B7:99:F1:40:28:E5:B5:37:50:6E:2A:F8:78:44:90:41:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIg6t5nxQCjltTdQbir4eESQQcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f4de11-5239-4ec5-81e6-2648fe9cc020/1/NIg6t5nxQCjltTdQbir4eESQQcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:49:6c:cd:5f:f5:42:57:e4:83:c7:1c:1a:ff:2b:d7:e1:c3:
07:ef:23:09:dd:0b:17:8f:c4:55:6f:5a:23:eb:a4:10:6b:5d:
8c:97:cb:08:6d:ac:9e:16:b5:e9:fd:58:6c:d5:8f:23:d2:66:
3b:77:03:2b:27:de:b1:bb:31:e3:c5:7c:cf:ad:16:22:f6:77:
e4:2f:0b:fd:94:df:1c:2a:c2:83:41:03:5f:5e:ab:9a:a4:58:
3e:38:ab:01:82:12:1c:4d:10:ef:d4:33:27:8c:30:70:d5:23:
ce:5c:82:be:5d:1a:8e:97:1e:77:9b:6f:e9:bd:2f:2f:0a:7f:
99:3e:c5:d0:f8:5e:75:e5:bc:4e:5d:2d:6c:c8:e8:df:48:fc:
d0:0b:53:a2:50:82:a3:b5:92:d1:95:13:a1:98:b4:76:33:3c:
1a:4c:28:d9:b8:fc:ea:bc:d7:0a:79:c2:6b:fe:69:d9:63:0a:
4c:bc:e5:ff:88:10:ec:fd:11:70:48:d8:b3:9e:1d:4b:7c:13:
b2:93:a6:45:01:44:12:f2:9c:8b:7d:4c:db:0b:c0:9f:d8:02:
fe:e6:68:a1:a0:21:e6:d9:76:2a:3e:a5:2f:4f:72:a5:db:f2:
75:4d:8b:2d:94:d9:c9:dd:48:67:26:5a:95:df:a0:52:6d:30:
0e:15:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:34:54 2025 by rpki-client